From owner-freebsd-ipfw@FreeBSD.ORG  Fri Mar 13 13:31:19 2009
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5FEDE106564A
	for <freebsd-ipfw@freebsd.org>; Fri, 13 Mar 2009 13:31:19 +0000 (UTC)
	(envelope-from sebastian.mellmann@net.t-labs.tu-berlin.de)
Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de
	[130.149.220.252])
	by mx1.freebsd.org (Postfix) with ESMTP id 226B58FC28
	for <freebsd-ipfw@freebsd.org>; Fri, 13 Mar 2009 13:31:18 +0000 (UTC)
	(envelope-from sebastian.mellmann@net.t-labs.tu-berlin.de)
Received: from [192.168.1.2] (e179077073.adsl.alicedsl.de [85.179.77.73])
	by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id AE9C3700D498;
	Fri, 13 Mar 2009 14:31:17 +0100 (CET)
Message-ID: <49BA6027.3020004@net.t-labs.tu-berlin.de>
Date: Fri, 13 Mar 2009 14:31:19 +0100
From: Sebastian Mellmann <sebastian.mellmann@net.t-labs.tu-berlin.de>
User-Agent: Thunderbird 2.0.0.19 (Windows/20081209)
MIME-Version: 1.0
To: Ian Smith <smithi@nimnet.asn.au>
References: <5431.62.206.221.107.1236336345.squirrel@anubis.getmyip.com>
	<20090306234700.F71460@sola.nimnet.asn.au>
In-Reply-To: <20090306234700.F71460@sola.nimnet.asn.au>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: freebsd-ipfw@freebsd.org
Subject: Re: ipfw: Can't see other flows in pipe
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Mar 2009 13:31:19 -0000


> On Fri, 6 Mar 2009, Sebastian Mellmann wrote:
> [.. after merciless snippage ..]
>
>  > $cmd pipe 500 config bw $bottleneck_bandwidth
>  > $cmd add pipe 500 all from any to any via $in_if
>  > 
>  > $cmd pipe 510 config bw $bottleneck_bandwidth
>  > $cmd add pipe 510 all from any to any via $out_if
>
>  > ipfw pipe show gives me the following:
>  > 
>  > 00510: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
>  >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
>  > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
>  > Pkt/Byte Drp
>  >   0 tcp      192.168.5.4/47753     192.168.7.1/22    610244 609078476  2
>  > 104   1
>
>  > 00500: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
>  >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
>  > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
>  > Pkt/Byte Drp
>  >   0 tcp      192.168.5.4/47753     192.168.7.1/22    609337 607754332  2
>  > 1552   0
>
>  > Why do I only see ONE connection inside the 500/510 pipe?
>  > I thought I could see any connection going through that pipe.
>
> With no masking specified, all flows use the same bucket (0) so totals 
> shown are of all packets through that pipe.  src/dest addr/ports shown 
> are those of the first packet using that bucket, not the most recent.
>
>   
Ok that makes sense.
But when I have a look at the "drop" value does it tell me the overall
drops in that pipe or only the drops for the specific flow (in this case
between 192.168.5.4 and 192.168.7.1)?

> You may also find http://info.iet.unipi.it/~luigi/ip_dummynet/ helpful.
>
> cheers, Ian
>   
Thanks for the help!

Regards,
Sebastian